Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.cer
File:                     0CC5E1CBDCD04F80282F613D311E54D6E47CE236.cer (raw, json)
Hash identifier:          7xPEcZ4bbRZuHS97VOUGI1gjtbZxpZONU0Pr6e3VkZI=
Subject key identifier:   0C:C5:E1:CB:DC:D0:4F:80:28:2F:61:3D:31:1E:54:D6:E4:7C:E2:36
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7BF68A92F2FDDDE2D135B4D25523DA4650C0110A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:10 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:10 +0000
Subordinate resources:    AS: 266357
                          IP: 170.239.208.0/22
                          IP: 2804:3694::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f6:8a:92:f2:fd:dd:e2:d1:35:b4:d2:55:23:da:46:50:c0:11:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:10 2025 GMT
            Not After : Mar  4 18:40:10 2026 GMT
        Subject: CN=0CC5E1CBDCD04F80282F613D311E54D6E47CE236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:4a:88:81:73:ef:12:67:e7:91:20:63:02:
                    68:3d:d2:61:57:98:98:ed:30:c7:5d:27:a6:5c:77:
                    29:2e:79:b5:4e:81:b8:ce:48:1b:ba:1c:3e:34:91:
                    bd:dc:ad:f3:c7:51:63:d4:56:08:97:e2:54:96:57:
                    28:cd:8a:5c:2a:47:d0:d3:fc:96:39:b5:4c:14:8c:
                    a8:0e:91:c8:d0:ec:fa:c6:c4:46:f4:63:f0:e5:97:
                    33:07:a6:21:aa:68:bd:bd:d8:c8:80:0a:93:99:4a:
                    03:59:72:cc:c6:42:28:96:5f:35:d7:a2:28:18:68:
                    32:bd:d0:39:90:49:e3:82:62:be:fb:7d:28:74:ab:
                    d1:9f:7d:0b:08:61:79:6b:08:9a:2d:34:5b:f9:ca:
                    f5:c2:39:1a:8d:a8:55:7d:c9:fe:5e:e9:b6:7e:7e:
                    ca:e9:22:5c:30:48:9c:d0:a4:3b:d2:76:16:6b:ef:
                    61:83:1d:49:e5:6f:b6:39:48:12:c7:4f:25:1a:55:
                    30:2e:46:28:ee:be:16:5f:84:fe:79:64:fd:88:f7:
                    c5:05:a0:27:dd:9b:39:d0:84:22:0d:00:23:09:e4:
                    42:a1:19:0d:b9:7d:4a:b2:8b:2f:58:2f:92:88:88:
                    e3:1c:5d:c4:7b:2b:b4:2c:da:1e:1a:02:a5:c7:02:
                    07:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:C5:E1:CB:DC:D0:4F:80:28:2F:61:3D:31:1E:54:D6:E4:7C:E2:36
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FBmp252BbkpyQv2yaVRYVh4iovAqAmU63TC8GZ74rer9/1/0CC5E1CBDCD04F80282F613D311E54D6E47CE236.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.208.0/22
                IPv6:
                  2804:3694::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266357

    Signature Algorithm: sha256WithRSAEncryption
         06:33:83:0d:b1:6f:7a:08:92:06:d6:b9:c5:e2:c3:20:f6:69:
         d6:f8:10:19:90:26:a9:60:68:90:8a:90:69:a7:3e:16:42:be:
         85:a2:2a:51:72:f5:71:92:42:0a:84:df:69:85:0b:d7:49:29:
         41:78:20:81:8b:e4:e4:85:4f:ae:72:1b:82:53:24:13:a9:8d:
         70:57:d7:c8:b2:95:1b:36:2c:c1:04:8d:91:b6:44:1e:aa:5a:
         34:70:d6:19:2f:24:77:6c:a2:42:45:d0:b2:54:fe:62:d4:1b:
         e1:38:d7:2e:d8:15:a7:84:a4:f2:5f:42:bc:32:8d:61:33:93:
         58:62:6e:87:d9:1a:59:56:33:0b:54:74:d9:31:49:34:d5:1f:
         09:ea:00:bb:65:ef:d7:7b:58:1a:0c:7d:da:4e:74:18:a4:de:
         0f:41:56:10:7f:92:6a:95:91:83:83:4b:32:7f:3a:c1:b0:e3:
         cd:33:10:f3:eb:ee:6f:d1:0f:32:53:64:f4:e6:4a:8f:db:ea:
         08:fd:48:68:10:9e:3a:0d:d2:df:c3:0d:72:97:12:c1:8b:b1:
         9f:94:7a:24:9c:23:ad:f6:dd:3c:6a:50:11:33:43:19:c1:06:
         60:9e:97:c8:28:e6:56:65:82:22:df:c8:14:f5:34:b2:a3:03:
         e4:bd:38:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:27:29 2025 by rpki-client